$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: 7HBSX9tGfdFY9aqXBosaeFVypOiPKOl2Z4hqcatH2s8= Subject key identifier: 58:BD:0E:94:08:97:C3:39:55:77:85:BE:61:41:A3:4B:AD:45:9B:79 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 79E75A971FE82A5D52EC1B9302C60778BA39ACD9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 017F Signing time: Tue 12 May 2026 19:29:38 +0000 Manifest this update: Tue 12 May 2026 19:24:38 +0000 Manifest next update: Wed 13 May 2026 22:15:38 +0000 Files and hashes: 1: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 2: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 3: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 4: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 5: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 6: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 7: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 8: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 9: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 10: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 11: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 12: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: 1wtJMQ/WQi4GWczUr3IswhltiNxNtwI7o5jCpeMba9A=) 13: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 14: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 15: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 16: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 17: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e7:5a:97:1f:e8:2a:5d:52:ec:1b:93:02:c6:07:78:ba:39:ac:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: May 12 19:24:38 2026 GMT Not After : May 13 22:15:38 2026 GMT Subject: CN=58BD0E940897C339557785BE6141A34BAD459B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:96:a9:a3:f3:46:f4:53:78:78:6c:e3:ad: 69:96:b6:c9:34:1f:1a:c0:8b:bb:da:23:18:b1:0d: d0:60:12:f8:13:2c:68:48:da:fe:86:26:17:0c:2a: f5:cd:d1:20:b8:ea:05:25:c0:65:8b:9e:86:ac:e0: bd:a6:a7:11:39:f0:8e:b8:49:6b:a9:53:aa:fe:c8: d3:c1:ac:5b:4a:3e:24:bb:7b:96:e4:06:8e:e4:fb: 3b:07:54:f6:8f:59:af:de:4c:e3:b8:0f:17:9c:bf: f3:3a:ae:a9:71:d2:cd:88:c9:4f:1e:82:65:53:00: 6b:5e:70:c8:d3:2f:09:9f:08:5b:d8:cf:34:02:f8: 2f:b5:81:36:83:0e:71:b6:67:e6:76:a3:f2:ee:92: e0:4c:68:9f:29:32:38:1c:12:2e:16:1f:1c:3e:43: ac:9f:59:01:c3:1e:43:27:6c:91:ef:82:9e:00:06: 7b:83:6b:18:ab:44:df:4c:00:79:d3:6c:bd:b6:6b: 9c:87:d5:06:93:f5:df:4e:6a:bd:27:e4:b3:b7:4a: a3:3a:01:f6:e0:c0:ac:1f:c8:23:e8:82:92:8b:11: 85:f4:cb:a1:35:c6:ca:08:c4:e9:52:dc:e5:98:cf: 7a:7f:92:04:f0:df:dc:a9:43:8e:e5:40:bb:6f:b3: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BD:0E:94:08:97:C3:39:55:77:85:BE:61:41:A3:4B:AD:45:9B:79 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ef:1b:81:44:79:b1:f4:4f:84:bc:d3:e2:0b:f4:3c:d2:a7: 7a:93:53:46:4c:4a:c5:c9:45:c2:e8:53:b2:95:da:91:00:87: 6b:26:b8:47:2c:e7:0d:dd:e6:bf:e9:5d:42:db:f8:6c:28:eb: 6a:12:27:53:a5:19:39:bb:46:d7:01:a6:74:94:df:af:ba:a0: 53:f1:0d:91:cf:c4:fd:7a:3d:79:c1:ca:b1:4c:71:04:4f:ff: 99:53:ba:bb:73:58:83:d8:e4:07:d1:4f:95:b6:42:57:92:45: c6:33:b8:5a:47:fb:14:e1:1c:b4:65:01:cd:d1:bf:f2:a1:fb: e3:a2:46:d3:18:b8:92:b4:a8:d2:0e:28:96:47:75:7c:e3:18: 02:1c:3b:b3:6a:0c:25:9f:e6:63:e8:d6:55:22:2b:b0:2c:e3: 44:d5:0d:be:9e:d4:c1:3b:5c:3f:03:46:d8:1e:bd:6d:e8:c9: fe:41:ce:6a:12:44:0d:2a:6c:0e:75:f3:94:34:1d:2c:64:3c: d1:ff:64:73:52:1a:12:91:f4:04:21:d9:ec:5f:0d:e3:88:63: e7:9f:39:32:20:b8:31:06:48:23:79:05:57:83:34:87:26:7f: 60:ac:b2:34:d4:10:26:c1:dd:ca:a4:77:af:a8:f0:59:de:f4: 8b:30:76:e7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeedalx/oKl1S7BuTAsYHeLo5rNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA1MTIxOTI0MzhaFw0yNjA1MTMyMjE1MzhaMDMxMTAvBgNV BAMTKDU4QkQwRTk0MDg5N0MzMzk1NTc3ODVCRTYxNDFBMzRCQUQ0NTlCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrZapo/NG9FN4eGzjrWmWtsk0 HxrAi7vaIxixDdBgEvgTLGhI2v6GJhcMKvXN0SC46gUlwGWLnoas4L2mpxE58I64 SWupU6r+yNPBrFtKPiS7e5bkBo7k+zsHVPaPWa/eTOO4Dxecv/M6rqlx0s2IyU8e gmVTAGtecMjTLwmfCFvYzzQC+C+1gTaDDnG2Z+Z2o/LukuBMaJ8pMjgcEi4WHxw+ Q6yfWQHDHkMnbJHvgp4ABnuDaxirRN9MAHnTbL22a5yH1QaT9d9Oar0n5LO3SqM6 AfbgwKwfyCPogpKLEYX0y6E1xsoIxOlS3OWYz3p/kgTw39ypQ47lQLtvs2y3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWL0OlAiXwzlVd4W+YUGjS61Fm3kwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAU7xuB RHmx9E+EvNPiC/Q80qd6k1NGTErFyUXC6FOyldqRAIdrJrhHLOcN3ea/6V1C2/hs KOtqEidTpRk5u0bXAaZ0lN+vuqBT8Q2Rz8T9ej15wcqxTHEET/+ZU7q7c1iD2OQH 0U+VtkJXkkXGM7haR/sU4Ry0ZQHN0b/yofvjokbTGLiStKjSDiiWR3V84xgCHDuz agwln+Zj6NZVIiuwLONE1Q2+ntTBO1w/A0bYHr1t6Mn+Qc5qEkQNKmwOdfOUNB0s ZDzR/2RzUhoSkfQEIdnsXw3jiGPnnzkyILgxBkgjeQVXgzSHJn9grLI01BAmwd3K pHevqPBZ3vSLMHbn -----END CERTIFICATE-----Generated at Wed May 13 13:58:59 2026 by rpki-client